Improper Authorization Vulnerability in Smart Switch from Samsung
CVE-2026-21136

6.8MEDIUM

Key Information:

Vendor

Samsung
Status
Smart Switch
Vendor
CVE Published:
12 October 2026

What is CVE-2026-21136?

An improper authorization vulnerability exists in Smart Switch versions before 3.7.73. This flaw allows physical attackers to initiate the application restore process without proper verification, potentially leading to unauthorized data access. Users are urged to update to the latest version to mitigate risks associated with this security issue.

Affected Version(s)

Smart Switch 3.7.73

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.